50 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-6082
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate...
Exploit for CVE-2025-6082
CVE-2025-6082 Full Path Disclosure PoC Author: Byte Reape...
CVE-2025-6082
creationtimestamp| type| source ---|---|--- 2025-07-22 15:15:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukscirdky2j 2025-07-22 21:00:04+00:00| published-proof-of-concept| Telegram/BGbdnO5qVCeRESkVN9shfeMdpVcVG1XeThDpF5WVRjJQCD0 2025-07-23 03:00:11+00:00|...
CVE-2025-6082
The CVE-2025-6082 vulnerability affects the Birth Chart Compatibility WordPress plugin (versions up to 2.0). The root cause is an information-disclosure flaw that allows unauthenticated users to directly access the plugin’s index.php, triggering PHP warnings/fatal errors and revealing the server’...
WordPress Birth Chart Compatibility plugin <= 2.0 - Unauthenticated Full Path Exposure vulnerability
Unauthenticated Full Path Exposure vulnerability discovered by Amin Beheshti in WordPress Plugin Birth Chart Compatibility versions = 2.0...
CVE-2020-6082
creationtimestamp| type| source ---|---|--- 2024-10-23 16:11:43+00:00| seen| https://t.me/CyberSecurityTechnologies/1078...
Titan FTP Server 6.26.630 SITE WHO Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Titan FTP Server 6.26.630 SITE WHO DoS', 'Description' = %q The Titan FTP server v6.26 build 630 can be DoS'd by issuing "SITE WHO". You need a...
CVE-2024-6082
A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-logo-text leads to cross site scripting. The attac...
CVE-2023-6082
creationtimestamp| type| source ---|---|--- 2024-02-12 17:22:00+00:00| seen| https://t.me/ctinow/183274 2024-02-15 14:21:12+00:00| seen| https://t.me/ctinow/185535...
CVE-2023-6082
The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-6082 Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting
The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-6082 Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting
The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-6082
CVE-2023-6082 affects the chartjs WordPress plugin (through version 2023.2). The root cause is inadequate sanitization/escapes of certain plugin settings, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). Connected sources s...
WordPress enigma chart.js Plugin <= 2023.2 is vulnerable to Cross Site Scripting (XSS)
Software enigma chart.js Type Plugin Vulnerable versions = 2023.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6082 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1f48f6888cc5 Credits Asif Nawaz Minhas & Serge...
SUSE CVE-2018-6082
Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page...
Security Bulletin: A security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x (CVE-2016-6082)
Summary BigFix Platform BES Root Server and BES Relay is shipped as a component of IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x. Information about a security vulnerability affecting BigFix Platform has been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-6082...
Mageia: Security Advisory (MGASA-2018-0268)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-6082
Summary: CVE-2020-6082 is a documented out-of-bounds write in the ICO reader of the Accusoft ImageGear 19.6.0 library (igcore19d.dll), caused by an improper size calculation in ico_read. An attacker can trigger a remote code execution by feeding a malformed ICO file. Public details include the vu...
Fedora 28 : qt5-qtwebengine (2018-b844991a97)
A QtWebEngine security update backporting security fixes from Chromium 65 up to 65.0.3325.146. The backports have been forward-ported from QtWebEngine 5.9.5 LTS. This update fixes the following security issues : - CVE-2017-15429 - CVE-2018-6033 claimed fixed in 5.10.1, but the fix was incomplete...
lodzkie.aluminium-6082.info.pl XSS vulnerability
Open Bug Bounty ID: OBB-701761 Description| Value ---|--- Affected Website:| lodzkie.aluminium-6082.info.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...